CVE-2015-5957 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	10 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:C/I:C/A:C
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 65%

Vendor	Product	Version
opensuse	opensuse	13.1
opensuse	opensuse	13.2
roaring_penguin	remind	𝑥 ≤ 3.1.14

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

remind

bullseye	03.03.01-1 fixed
bookworm	04.02.03-4 fixed
sid	05.00.07-1 fixed
trixie	05.00.07-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

remind

disco	not-affected
cosmic	not-affected
bionic	not-affected
artful	not-affected
zesty	not-affected
yakkety	not-affected
xenial	not-affected
wily	not-affected
vivid	ignored
trusty	dne
precise	ignored

Known Exploits!

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://lists.opensuse.org/opensuse-updates/2015-09/msg00025.html

http://lists.roaringpenguin.com/pipermail/remind-fans/2015/003172.html

http://www.openwall.com/lists/oss-security/2015/07/29/2

http://www.openwall.com/lists/oss-security/2015/08/07/1

http://www.securityfocus.com/bid/76099

http://lists.opensuse.org/opensuse-updates/2015-09/msg00025.html

http://lists.roaringpenguin.com/pipermail/remind-fans/2015/003172.html

http://www.openwall.com/lists/oss-security/2015/07/29/2

http://www.openwall.com/lists/oss-security/2015/08/07/1

http://www.securityfocus.com/bid/76099